Behavioral task
behavioral1
Sample
b6d35db8fc54d8b0df767a4d57f88749.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6d35db8fc54d8b0df767a4d57f88749.exe
Resource
win10v2004-20240226-en
General
-
Target
b6d35db8fc54d8b0df767a4d57f88749
-
Size
13KB
-
MD5
b6d35db8fc54d8b0df767a4d57f88749
-
SHA1
a725c4bc9e1594a6fe75c10abdd44a52f3a03e18
-
SHA256
51d27207d7fe5ff27c9ce388cc751a10d2bd6d55ea9b7fd504388e6aaaa7941a
-
SHA512
5b91aa94834bd2fd42b40366c8581e1340a39ccce4f45a29f989c92ccdb0792b7e58814aacdf42efd4bb941f7d5abb4a475354e595ab76a6cfbc9497ed74b223
-
SSDEEP
384:gA9wOwo3Mov4yh5/d3Y1p2G2FOEx9/uScQjaNJawcudoD7UL:yO5MOhFIp5C3xYSwnbcuyD7U
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6d35db8fc54d8b0df767a4d57f88749
Files
-
b6d35db8fc54d8b0df767a4d57f88749.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE